This is an automated email from the ASF dual-hosted git repository.
chengpan pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/kyuubi.git
The following commit(s) were added to refs/heads/master by this push:
new 80f7496dd [KYUUBI #6528] Bump Netty 4.1.108.Final
80f7496dd is described below
commit 80f7496dde317dd820be3ce836e69fce974754a9
Author: madlnu <[email protected]>
AuthorDate: Sat Jul 6 00:09:44 2024 +0800
[KYUUBI #6528] Bump Netty 4.1.108.Final
# :mag: Description
Upgrade the Netty version to fix the CVEs
## Types of changes :bookmark:
- [ ] Bugfix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
## Test Plan ๐งช
GHAs
---
# Checklist ๐
- [ ] This patch was not authored or co-authored using [Generative
Tooling](https://www.apache.org/legal/generative-tooling.html)
**Be nice. Be informative.**
Closes #6528 from Madhukar525722/netty_upgrade.
Closes #6528
6c083c1fa [madlnu] Bump Netty 4.1.108.Final
Authored-by: madlnu <[email protected]>
Signed-off-by: Cheng Pan <[email protected]>
---
dev/dependencyList | 32 ++++++++++++++++----------------
pom.xml | 2 +-
2 files changed, 17 insertions(+), 17 deletions(-)
diff --git a/dev/dependencyList b/dev/dependencyList
index 33aa6cd47..cd223fccd 100644
--- a/dev/dependencyList
+++ b/dev/dependencyList
@@ -134,22 +134,22 @@ metrics-jmx/4.2.26//metrics-jmx-4.2.26.jar
metrics-json/4.2.26//metrics-json-4.2.26.jar
metrics-jvm/4.2.26//metrics-jvm-4.2.26.jar
mimepull/1.9.15//mimepull-1.9.15.jar
-netty-buffer/4.1.100.Final//netty-buffer-4.1.100.Final.jar
-netty-codec-dns/4.1.100.Final//netty-codec-dns-4.1.100.Final.jar
-netty-codec-http/4.1.100.Final//netty-codec-http-4.1.100.Final.jar
-netty-codec-http2/4.1.100.Final//netty-codec-http2-4.1.100.Final.jar
-netty-codec-socks/4.1.100.Final//netty-codec-socks-4.1.100.Final.jar
-netty-codec/4.1.100.Final//netty-codec-4.1.100.Final.jar
-netty-common/4.1.100.Final//netty-common-4.1.100.Final.jar
-netty-handler-proxy/4.1.100.Final//netty-handler-proxy-4.1.100.Final.jar
-netty-handler/4.1.100.Final//netty-handler-4.1.100.Final.jar
-netty-resolver-dns/4.1.100.Final//netty-resolver-dns-4.1.100.Final.jar
-netty-resolver/4.1.100.Final//netty-resolver-4.1.100.Final.jar
-netty-transport-classes-epoll/4.1.100.Final//netty-transport-classes-epoll-4.1.100.Final.jar
-netty-transport-native-epoll/4.1.100.Final/linux-aarch_64/netty-transport-native-epoll-4.1.100.Final-linux-aarch_64.jar
-netty-transport-native-epoll/4.1.100.Final/linux-x86_64/netty-transport-native-epoll-4.1.100.Final-linux-x86_64.jar
-netty-transport-native-unix-common/4.1.100.Final//netty-transport-native-unix-common-4.1.100.Final.jar
-netty-transport/4.1.100.Final//netty-transport-4.1.100.Final.jar
+netty-buffer/4.1.108.Final//netty-buffer-4.1.108.Final.jar
+netty-codec-dns/4.1.108.Final//netty-codec-dns-4.1.108.Final.jar
+netty-codec-http/4.1.108.Final//netty-codec-http-4.1.108.Final.jar
+netty-codec-http2/4.1.108.Final//netty-codec-http2-4.1.108.Final.jar
+netty-codec-socks/4.1.108.Final//netty-codec-socks-4.1.108.Final.jar
+netty-codec/4.1.108.Final//netty-codec-4.1.108.Final.jar
+netty-common/4.1.108.Final//netty-common-4.1.108.Final.jar
+netty-handler-proxy/4.1.108.Final//netty-handler-proxy-4.1.108.Final.jar
+netty-handler/4.1.108.Final//netty-handler-4.1.108.Final.jar
+netty-resolver-dns/4.1.108.Final//netty-resolver-dns-4.1.108.Final.jar
+netty-resolver/4.1.108.Final//netty-resolver-4.1.108.Final.jar
+netty-transport-classes-epoll/4.1.108.Final//netty-transport-classes-epoll-4.1.108.Final.jar
+netty-transport-native-epoll/4.1.108.Final/linux-aarch_64/netty-transport-native-epoll-4.1.108.Final-linux-aarch_64.jar
+netty-transport-native-epoll/4.1.108.Final/linux-x86_64/netty-transport-native-epoll-4.1.108.Final-linux-x86_64.jar
+netty-transport-native-unix-common/4.1.108.Final//netty-transport-native-unix-common-4.1.108.Final.jar
+netty-transport/4.1.108.Final//netty-transport-4.1.108.Final.jar
okhttp-urlconnection/3.14.9//okhttp-urlconnection-3.14.9.jar
okhttp/3.12.12//okhttp-3.12.12.jar
okio/1.15.0//okio-1.15.0.jar
diff --git a/pom.xml b/pom.xml
index 36bf51168..ab207f43e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -179,7 +179,7 @@
<log4j.version>2.20.0</log4j.version>
<mysql.jdbc.version>8.0.32</mysql.jdbc.version>
<mockito.version>4.11.0</mockito.version>
- <netty.version>4.1.100.Final</netty.version>
+ <netty.version>4.1.108.Final</netty.version>
<openai.java.version>0.12.0</openai.java.version>
<retrofit.version>2.9.0</retrofit.version>
<paimon.version>0.7.0-incubating</paimon.version>